InfoSecBulletin Cybersecurity for mankind

Microsoft issued urgent updates for two serious SharePoint security holes, identified as CVE-2025-53770 and CVE-2025-53771, used in attacks known as “ToolShell.” Both vulnerabilities exclusively affect on-premises SharePoint Servers, allowing threat actors to exploit them for unauthenticated, remote code execution. Microsoft has announced that the SharePoint vulnerability CVE-2025-53770, with a CVSS …

Hewlett-Packard Enterprise (HPE) warns that Aruba Instant On Access Points have hardcoded credentials, enabling attackers to skip normal authentication and reach the web interface. Aruba Instant On Access Points are small, easy-to-use Wi-Fi devices for small to medium businesses. They provide advanced features like guest networks and traffic segmentation, and …

The Akira ransomware group increased its attacks, adding 12 new victims to its dark web portal from July 15 to July 17, 2025. They target various industries worldwide, including food production, manufacturing, legal, and IT services. The group uses a double-extortion tactic by stealing sensitive data, encrypting systems, and threatening …